Consent for secondary use is implied if consumers don’t opt out of the MyHR. In other words, people need to take action if they don’t want their health data to be used for purposes other than direct clinical care.

To stop information flowing to third parties, consumers will have to press the ‘withdraw participation button’.

Another hot topic is the use of the data by commercial organisations which, interestingly, is permitted under the framework, provided it is ‘in the public interest’.